Privacy Policy

Last updated: April 14, 2026

Solid Steps ("we", "our") is built by Hashing Corp. This policy explains what data we collect when you use the Solid Steps iOS app, how we use it, and the choices you have.

1. Data we collect

Account information

• Email address — used to sign you in and contact you about account issues.
• Display name (optional) — shown to your co-caregivers.
• Sign-in identifier — a stable ID from Apple, Google, or a password hash (we never store your raw password; it's hashed with bcrypt).

Baby and feeding data

• Baby profile: name, date of birth, feeding mode, solids start date, optional notes.
• Feeding logs: food, amount, time, whether baby ate successfully, optional notes.
• Reactions: severity, symptoms, time, actions taken, optional notes.
• Caregiver relationships you create (invites, accepted co-caregivers).

Technical data

• Device push token (only if you opt in to notifications) — used to deliver notifications via Apple Push Notification service.
• Standard server logs (IP address, request timestamps) — retained up to 30 days for abuse prevention and debugging.

2. What we do NOT collect

• No advertising identifier (IDFA).
• No third-party analytics SDKs.
• No tracking across other apps or websites.
• No location data.
• No contacts, photos, or health data from HealthKit unless you explicitly add them.

3. How we use your data

Your data is used to:

• Sync your baby profile and logs across your devices and your co-caregivers' devices.
• Generate the summary views in the app (progress, history, nutrition).
• Send push notifications you opt in to.
• Contact you about your account or critical service issues.

We do not sell your data, ever. We do not use your data to train machine-learning models.

4. How data is stored

Data is stored on servers operated by Fly.io (application) and managed Postgres (database). All network traffic between the app and our servers is encrypted with HTTPS/TLS. Passwords are hashed with bcrypt before storage.

5. Data retention and deletion

You can permanently delete your account at any time from within the app: Settings → Account → Delete account. Deletion removes:

• Your user record and sign-in identifiers.
• All baby profiles you created.
• All feeding logs, reactions, and daily plans associated with those profiles.
• Your caregiver links and device push tokens.

Deletion is immediate and irreversible. Backup copies are purged within 30 days.

You can also request deletion by emailing jasonyangjizheng+solidsteps@gmail.com.

6. Co-caregiver sharing

When you invite another person as a co-caregiver for your baby, they can see and add to that baby's logs. You can remove a co-caregiver at any time from the Family tab. Removing a co-caregiver revokes their access immediately, but data they previously logged remains attached to the baby profile.

7. Children's privacy

Solid Steps is intended for parents and caregivers. The app is not directed at children and does not knowingly collect data from users under 13. The baby profile you create is about your child but does not constitute an account for the child.

8. Third-party services

We use the following third parties strictly for operating the service:

• Apple Sign in with Apple — for optional Apple ID-based sign-in.
• Google Sign-In (OAuth) — for optional Google account-based sign-in. No Google SDK is embedded; the flow uses Apple's ASWebAuthenticationSession.
• Apple Push Notification service — to deliver opt-in notifications.
• Fly.io — application hosting.

We do not share your personal data with any other third party except as required by law.

9. Your rights

Depending on your jurisdiction (GDPR, CCPA, etc.), you may have the right to access, correct, export, or delete your personal data. The in-app delete flow covers deletion. For any other request, email jasonyangjizheng+solidsteps@gmail.com.

10. Changes to this policy

If we make material changes to how we handle data, we'll update the "Last updated" date at the top of this page and notify you in-app before the changes take effect.

11. Contact

Questions about this policy or your data? Email jasonyangjizheng+solidsteps@gmail.com.